$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2cdc4287-34ab-36be-8bc5-a122cf852c8d.roa File: 2cdc4287-34ab-36be-8bc5-a122cf852c8d.roa (raw, json) Hash identifier: Bj4rbWR8WTdpuJOXOMZnAXaSZUySyVq18lujmaQdjnQ= Subject key identifier: 1B:CE:CD:C4:F1:EC:AB:EB:B7:3F:4E:05:4F:9B:36:D8:D9:98:23:B6 Certificate issuer: /CN=24f82d36-633a-44e0-9b31-a523e1609720 Certificate serial: 010D0C9F4328584D9E1EE4D8DCC9C11D32E08260 Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2cdc4287-34ab-36be-8bc5-a122cf852c8d.roa Signing time: Fri 24 Apr 2026 23:21:32 +0000 ROA not before: Fri 24 Apr 2026 23:21:32 +0000 ROA not after: Thu 23 Jul 2026 23:21:32 +0000 asID: 7029 IP address blocks: 64.16.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:1e:e4:d8:dc:c9:c1:1d:32:e0:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720 Validity Not Before: Apr 24 23:21:32 2026 GMT Not After : Jul 23 23:21:32 2026 GMT Subject: CN=47081faf-62a1-443a-b0e1-388c634c6159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:15:04:75:43:e5:ea:63:4b:75:2a:27:a3: 27:56:0c:c8:5a:5e:2c:c3:2a:a6:7b:8f:b1:2e:ee: 53:02:42:09:94:cb:3a:7e:4a:19:53:a8:b9:3a:22: f2:a3:2b:a8:af:96:1d:92:28:bf:a6:83:68:b5:a3: a8:df:e6:8a:83:ec:d7:95:9e:bc:61:eb:42:58:4a: 18:ca:9a:b2:c8:d7:b4:14:5f:53:16:94:6d:8b:e4: e9:f8:de:77:eb:ca:12:d3:a7:6e:90:05:7e:49:44: 90:c8:fb:0c:dc:28:31:fc:81:c6:0e:40:fb:7b:89: 2b:4e:44:8c:ff:94:60:3a:48:89:c7:64:a2:0f:0d: 73:04:e1:78:89:64:dc:a7:ae:cb:c3:e5:8e:5a:08: 36:b5:88:dc:ef:4d:9e:f5:8a:6e:ef:0c:70:2e:8e: 6c:26:32:db:8a:01:64:5c:50:c2:12:a1:4d:d2:6b: bd:2f:9b:a5:c9:13:7d:57:17:c0:37:1b:73:36:d1: 4a:6e:96:0d:7b:a8:25:d7:08:72:5e:22:8e:00:9a: 36:74:42:48:08:cb:ce:20:35:81:96:42:1b:d4:e0: da:04:0c:14:28:6f:47:c7:33:66:f6:e0:d4:39:c0: 07:61:3c:d7:dd:43:d8:f9:7e:0b:a0:ea:6c:89:57: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CE:CD:C4:F1:EC:AB:EB:B7:3F:4E:05:4F:9B:36:D8:D9:98:23:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/2cdc4287-34ab-36be-8bc5-a122cf852c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl X509v3 Authority Key Identifier: keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer sbgp-ipAddrBlock: critical IPv4: 64.16.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e6:6d:b1:62:c3:27:55:a9:10:4e:cc:63:44:70:67:b7:8c: e7:8b:25:86:8e:39:13:f6:89:dd:ab:fc:d6:5c:89:06:6f:88: 72:d8:b7:45:d0:ab:4c:6f:53:fe:00:78:9e:6d:b3:6b:e1:01: e5:03:75:75:23:ad:bf:fe:0e:29:b2:83:5f:4b:93:e6:5b:22: ba:69:60:0d:06:d3:2f:ec:47:83:55:ad:e0:1d:62:4f:07:b0: 9c:34:cb:bc:fb:1a:af:23:c5:2c:3f:11:44:52:f3:ab:53:65: 14:c4:de:7c:ce:5b:df:ce:53:10:19:2f:02:aa:b2:01:94:70: 1f:fb:ee:dc:f2:cb:28:81:ed:9e:b5:d5:7d:79:01:24:e5:fd: 40:b9:68:c4:16:88:fe:a2:02:52:64:a4:08:52:b4:14:0e:fa: 4a:9a:05:93:9c:da:08:4b:91:67:17:7c:27:67:cc:db:5c:0b: f2:5f:9c:e3:26:f1:21:89:5e:0a:b2:37:79:62:12:11:cf:0a: d5:72:d6:d6:ea:ba:28:ca:25:24:85:f8:c7:6b:3e:ff:1b:d4: 71:05:e6:2f:71:fc:4a:c2:bd:76:db:30:59:4a:a8:9a:ca:1f: c0:6e:11:ca:5c:ff:d6:7a:67:eb:01:28:c0:a5:52:f7:f0:34: b6:ae:b7:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHuTY3MnBHTLggmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5 NzIwMB4XDTI2MDQyNDIzMjEzMloXDTI2MDcyMzIzMjEzMlowLzEtMCsGA1UEAxMk NDcwODFmYWYtNjJhMS00NDNhLWIwZTEtMzg4YzYzNGM2MTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVIVBHVD5epjS3UqJ6MnVgzIWl4swyqme4+x Lu5TAkIJlMs6fkoZU6i5OiLyoyuor5Ydkii/poNotaOo3+aKg+zXlZ68YetCWEoY ypqyyNe0FF9TFpRti+Tp+N5368oS06dukAV+SUSQyPsM3Cgx/IHGDkD7e4krTkSM /5RgOkiJx2SiDw1zBOF4iWTcp67Lw+WOWgg2tYjc702e9Ypu7wxwLo5sJjLbigFk XFDCEqFN0mu9L5ulyRN9VxfANxtzNtFKbpYNe6gl1whyXiKOAJo2dEJICMvOIDWB lkIb1ODaBAwUKG9HxzNm9uDUOcAHYTzX3UPY+X4LoOpsiVe3/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvOzcTx7Kvrtz9OBU+bNtjZmCO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4 MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMmNkYzQyODctMzRhYi0z NmJlLThiYzUtYTEyMmNmODUyYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnmbbFiwydVqRBOzGNEcGe3jOeLJYaOORP2id2r/NZciQZviHLYt0XQ q0xvU/4AeJ5ts2vhAeUDdXUjrb/+Dimyg19Lk+ZbIrppYA0G0y/sR4NVreAdYk8H sJw0y7z7Gq8jxSw/EURS86tTZRTE3nzOW9/OUxAZLwKqsgGUcB/77tzyyyiB7Z61 1X15ASTl/UC5aMQWiP6iAlJkpAhStBQO+kqaBZOc2ghLkWcXfCdnzNtcC/JfnOMm 8SGJXgqyN3liEhHPCtVy1tbquijKJSSF+MdrPv8b1HEF5i9x/ErCvXbbMFlKqJrK H8BuEcpc/9Z6Z+sBKMClUvfwNLautx0= -----END CERTIFICATE-----Generated at Wed May 13 07:01:09 2026 by rpki-client